exquisite-selkie-e19c12[.]netlify[.]app

This domain, exquisite-selkie-e19c12.netlify.app, is identified as a high-risk phishing resource designed to harvest user credentials through a fake login portal. Analysis indicates no explicit brand impersonation in the available metadata, though the infrastructure aligns with credential-theft campaigns. The absence of a visible page title beyond 'Site not found' suggests either a staging environment or a takedown of active content, though historical captures may reveal further details. No specific drainer kit signatures were observed in the current dataset. Infrastructure analysis reveals the domain was registered through Name.com, Inc., under Netlify’s hosting platform, and resolves to the IP address 63.176.8.218. The domain appears on a single security blocklist, while Google Safe Browsing explicitly flags it as phishing. Detection metrics from VirusTotal indicate 22 out of 95 security vendors have classified this domain as malicious. The SSL certificate, issued by DigiCert Inc under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain, was created on February 21, 2026, though this date may reflect a placeholder or misconfiguration. The IP address is geolocated to Germany and associated with AS16509, operated by a major cloud provider. As of the latest verification, the domain has been taken offline, likely in response to abuse reports or automated takedown mechanisms. Despite its current inactive status, residual risk persists due to potential cached DNS records or delayed propagation of blocklist updates. Organizations are advised to monitor for related indicators, including the IP address 63.176.8.218 and registrar patterns, to preemptively block similar infrastructure. End users should remain vigilant for unsolicited login prompts, particularly those delivered via email or messaging platforms, and verify domain authenticity before entering credentials.